Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          bt2+XjdNcrOG18B0uNadX+B1urbVj3plfbHXvsczUyY=
Subject key identifier:   1F:39:37:77:B9:DA:ED:3C:C0:85:32:04:C6:17:8E:71:CB:3D:60:BE
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       01A13D816451C2D4B588CD165E47E6CFEF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          0EF5
Signing time:             Thu 15 Oct 2026 03:00:52 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:52 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:52 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: GlzOMzCmYpgLCNRpM92bkupxUZEgmHId/U2mIG/5pDo=)
                          2: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (hash: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:64:51:c2:d4:b5:88:cd:16:5e:47:e6:cf:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: Oct 15 03:00:52 2026 GMT
            Not After : Oct 16 03:00:52 2026 GMT
        Subject: CN=1f393777b9daed3cc0853204c6178e71cb3d60be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:88:b4:78:d2:07:33:07:4b:72:05:af:2a:
                    bf:90:26:6e:56:23:d0:71:4c:13:88:dc:f6:e5:cc:
                    b8:5c:36:52:88:bf:e3:07:d3:f1:d4:c6:1e:11:11:
                    96:fe:63:8f:24:e9:99:ab:97:4a:09:f9:f1:17:bb:
                    5f:56:d8:2d:01:72:65:a3:12:37:54:bd:25:af:26:
                    d4:25:e3:d4:76:4a:ff:50:68:94:4f:74:59:70:b8:
                    37:14:12:17:57:07:7e:36:6b:52:eb:d7:53:d6:66:
                    97:63:08:0a:61:94:d1:01:23:69:f4:64:4b:75:8a:
                    b2:e5:9c:f0:33:02:5b:aa:84:e7:07:c2:ee:6a:18:
                    7d:0c:c2:07:32:af:15:0f:96:fa:d5:ff:2d:f3:e0:
                    4c:62:60:a4:22:77:f5:3d:f2:70:7b:1d:ec:80:01:
                    94:84:6a:b3:67:cd:bf:ab:3c:1a:e8:cb:c7:d6:e8:
                    b8:0f:7c:1f:48:3e:4b:69:ca:e4:8e:6b:c4:d5:9b:
                    f2:e9:31:3f:ab:77:5e:97:fd:46:1f:c4:56:93:ed:
                    2a:e6:0d:9c:34:e9:4e:84:27:75:91:b5:b3:29:26:
                    40:56:42:48:29:92:ad:bd:55:4f:3d:ca:a3:c3:c0:
                    fd:7e:57:be:d0:93:a7:f0:39:10:69:ba:64:85:ac:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:37:77:B9:DA:ED:3C:C0:85:32:04:C6:17:8E:71:CB:3D:60:BE
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:c8:2a:46:c5:3a:af:c8:72:00:67:af:f5:86:40:4f:36:
         eb:0c:aa:01:14:80:41:bf:71:b9:a0:b9:a3:97:03:38:01:0c:
         0a:8e:fa:4c:5b:0a:cc:b8:18:2d:71:fe:b3:b8:64:bf:f4:08:
         2e:a1:9e:18:d3:43:a2:42:86:4e:7b:25:99:cd:de:d6:09:4a:
         cd:1c:b8:a4:f3:74:e2:56:10:56:11:2b:23:33:8e:09:77:ec:
         98:14:6f:e6:39:e1:ce:6c:3e:8a:1b:06:9b:38:db:08:72:ee:
         36:ca:80:a1:b1:26:43:a9:c1:5d:be:02:45:88:96:3b:a2:3a:
         b7:74:dd:f7:07:d2:ec:2e:56:ac:aa:4d:59:ae:66:e9:2d:e6:
         a4:76:dd:eb:a0:53:92:71:3f:d9:f2:b9:f6:5d:e3:7d:f3:74:
         35:cb:6e:f9:f5:ec:07:28:b5:eb:59:17:a7:d3:d1:d7:e2:e0:
         ca:6b:b1:58:6c:74:6d:37:0f:31:b3:87:95:f4:55:c8:1a:90:
         92:f2:04:31:4b:b1:c2:3b:2f:8f:08:02:b2:5c:b3:a1:0e:68:
         af:4d:f7:7e:dd:d5:fb:ed:a0:72:06:15:69:3e:cc:b6:5a:09:
         5f:23:63:7f:c9:11:c1:8b:32:2b:f0:9d:df:2f:c9:9a:5a:37:
         ac:37:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:59 2026 by rpki-client